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METHOD AND SYSTEM FOR SECURE AUTHENTICATION 

ABSTRACT OF THE DISCLOSURE 
A system and method configured to provide secure Personal Identification 
Number (PIN) based authentication is disclosed. A passcode or PIN associated with a customer 
value card can be securely authenticated by an issuer prior to authorizing payment. An Access 
Control Server (ACS) can receive the PIN or passcode from a customer via a secure connection 
over a public network. The ACS can generate an encrypted PIN and can communicate the 
encrypted PIN to a remote issuer for authentication. The ACS can use one or more hardware 
security modules to generate the encrypted PIN. The hardware security modules can be 
emulated in software or implemented in hardware. The system can be configured such that the 
PIN is not exposed in an unencrypted form in a communication link or in hardware other than 
the originating customer terminal. 
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